Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/001EB4A284C911EFA902172CC4F9AE02.roa
File:                     001EB4A284C911EFA902172CC4F9AE02.roa (raw, json)
Hash identifier:          zhtgaYOP2t9BTocwcz6jeVnShJg9nciVYPAVq1zX9xk=
Subject key identifier:   A0:9E:3F:4A:B4:CF:B0:9F:F1:88:61:35:2A:C2:FA:6D:D8:B2:96:AF
Certificate issuer:       /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial:       0299
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/001EB4A284C911EFA902172CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:31:06 +0000
ROA not before:           Thu 23 Oct 2025 03:16:09 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     398465
IP address blocks:        103.15.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
                          rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B202, serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
        Validity
            Not Before: Oct 23 03:16:09 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a59f29-430c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:e4:e3:40:6b:e0:0e:9f:5b:ba:d2:a2:81:
                    dd:ad:d0:4b:df:fd:02:14:96:4c:c1:3a:7f:0e:99:
                    21:94:56:84:98:6b:a9:60:69:e8:12:0b:fe:0d:d6:
                    a3:ab:89:0e:79:c8:9e:82:7c:53:50:6a:6b:38:fd:
                    d9:7c:cd:c3:73:26:7e:99:d2:68:8d:c8:c6:f3:0d:
                    74:b7:ca:60:0c:76:bf:37:2b:31:91:01:16:77:57:
                    ed:d8:44:81:3f:e5:88:3d:11:ba:00:4d:bb:2b:53:
                    d6:02:1b:c4:5d:49:c1:52:46:91:57:47:e4:68:b8:
                    95:fd:b4:40:42:24:de:85:a0:9a:4d:90:2a:eb:41:
                    9e:b7:61:7a:eb:00:73:e8:c7:d0:87:00:3b:bc:8b:
                    0f:ab:d3:b8:68:39:84:dc:0e:15:34:78:6f:06:40:
                    b9:d0:65:4c:09:64:37:b2:2a:f9:da:f6:d0:10:b2:
                    05:6c:6b:be:73:4a:e4:a6:e4:2e:24:14:2a:b2:e3:
                    ff:e1:a0:9b:67:a4:26:d0:2c:dd:42:62:43:a2:e5:
                    a9:5e:a6:d5:6b:98:d7:86:04:b3:7e:03:a3:86:22:
                    89:3f:f8:27:41:35:18:21:6d:8f:a4:75:f8:5d:e9:
                    35:35:61:2f:0f:1f:b6:4d:5a:c2:fd:1b:d7:60:e1:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9E:3F:4A:B4:CF:B0:9F:F1:88:61:35:2A:C2:FA:6D:D8:B2:96:AF
            X509v3 Authority Key Identifier:
                keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/001EB4A284C911EFA902172CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:66:2d:97:34:45:77:23:9a:4a:78:09:07:8d:b0:4c:94:25:
         bf:08:b2:8d:eb:65:da:df:bf:4d:19:b9:55:2e:04:e4:4f:2a:
         78:eb:76:95:57:43:91:51:86:69:9e:2c:fa:b3:74:e0:b5:91:
         ae:1d:23:35:6f:5c:1c:8c:d6:cb:6f:5e:51:c9:e2:21:48:bf:
         5c:54:53:01:6a:2a:97:07:0c:d2:9b:de:3e:32:4a:36:53:48:
         70:5e:b3:0e:68:92:76:ee:15:bd:1a:e2:99:7b:20:99:f5:e2:
         0c:1c:4e:f9:ee:ee:10:11:73:43:2f:ff:4c:92:53:aa:5a:9e:
         fd:2e:00:b5:e6:c2:4e:80:32:d3:0e:54:d0:0e:42:00:87:73:
         67:54:a6:eb:7c:dd:e7:f6:4a:cb:68:92:28:c3:6d:1d:07:38:
         1b:06:83:13:20:b7:0b:7e:9e:03:69:3b:45:ee:a2:e4:9f:5f:
         91:cd:b9:e0:86:e7:a2:1c:eb:9c:96:43:2b:0a:1e:1c:84:25:
         9f:f4:84:8c:c0:ae:44:41:07:b9:c7:12:5b:b0:32:c2:13:17:
         55:11:e7:06:f7:1a:0b:c8:7d:5a:c4:c9:e9:0a:e4:96:21:6f:
         31:6a:bd:d2:7c:9a:a2:1b:04:8c:b8:e6:6b:c9:d7:97:a3:d5:
         68:3f:a4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:38 2026 by rpki-client